GCVE - cpe:2.3:a:gianluca_baldo:phpauction:2.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:gianluca_baldo:phpauction:2.1:*:*:*:*:*:*:*

part: a version: 2.1 update: *

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-3984`	vulnerable	2026-06-08 04:49:10.645826	Details available PHP remote file inclusion vulnerability in phpAdsNew/view.inc.php in Albasoftware Phpauction 2.1 and possibly later versions, with phpAdsNew 2.0.5, allows remote attackers to execute arbitrary PHP code via a URL in the phpAds_path parameter. Published: 2006-08-05T00:00:00.000Z Updated: 2024-08-07T18:48:39.405Z Open on db.gcve.eu Reference links http://securityreason.com/securityalert/1320 http://www.bb-pcsecurity.de/sicherheit_264.htm https://exchange.xforce.ibmcloud.com/vulnerabilities/28110 http://www.securityfocus.com/archive/1/441716/100/0/threaded http://www.securityfocus.com/bid/19254	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-0995`	vulnerable	2026-06-08 04:46:22.636360	Details available login.php for PHPAuction allows remote attackers to gain privileges via a direct call to login.php with the action parameter set to "insert," which adds the provided username to the adminUsers table. Published: 2003-04-02T05:00:00.000Z Updated: 2024-08-08T03:12:16.397Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/5141 http://www.phpauction.org/viewnew.php?id=5 http://archives.neohapsis.com/archives/bugtraq/2002-07/0014.html http://www.iss.net/security_center/static/9462.php	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.